$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145978.roa File: AS145978.roa (raw, json) Hash identifier: 0gq4BfBD8O8BtV1gksEk0vItYstzj9iZNEHo1p8v8h8= Subject key identifier: 72:8A:A4:2E:DE:9B:B6:9F:88:2B:FF:D6:FE:42:29:4F:26:68:40:2A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6AFF85D1469EC626C8CEE8EE468EB876957E3A9A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145978.roa Signing time: Wed 04 Mar 2026 06:30:32 +0000 ROA not before: Wed 04 Mar 2026 06:25:32 +0000 ROA not after: Wed 03 Mar 2027 06:30:32 +0000 asID: 145978 IP address blocks: 240a:ad00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ff:85:d1:46:9e:c6:26:c8:ce:e8:ee:46:8e:b8:76:95:7e:3a:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:32 2026 GMT Not After : Mar 3 06:30:32 2027 GMT Subject: CN=728AA42EDE9BB69F882BFFD6FE42294F2668402A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ab:55:92:0b:fa:0c:5b:de:13:35:f6:68:60: 5e:90:35:ce:9b:1d:81:e3:71:a6:db:b9:a9:62:d2: 42:ae:7b:ee:53:ea:2a:87:64:78:46:f8:74:7c:56: a0:8d:b1:32:f2:8d:56:c5:f0:e0:ab:f0:e2:0f:31: 20:c9:0d:60:70:61:4d:65:fa:61:ad:b4:14:41:37: 36:be:cb:a6:2e:e4:b8:00:72:96:b6:de:ff:4a:81: 5b:3b:1c:34:80:9e:0e:c0:1e:04:01:7c:eb:0b:8c: 69:bb:fe:a1:7a:99:af:ca:d3:34:d7:23:36:e6:ff: 12:40:b1:3b:dd:49:68:9f:f2:52:9f:a3:93:f3:ae: b6:eb:e8:de:ad:17:95:12:e6:3d:a1:69:26:59:2a: b2:f0:60:02:27:6d:bc:39:39:99:15:4f:90:f4:1d: ea:f1:68:e3:3f:77:6e:33:2c:dd:5d:f6:63:c7:ee: 22:c0:7c:f1:8b:a7:f6:a2:78:dd:37:b6:83:93:14: 64:8b:df:34:72:dc:c8:07:ab:15:f8:3a:18:0d:99: 50:eb:3a:1f:80:74:fa:c6:23:9b:b7:ce:71:20:32: cc:46:2a:7d:20:16:e9:80:9e:92:71:f6:75:6d:96: 93:e6:27:4d:b2:1c:f8:e0:45:fd:3d:03:8e:dc:43: e1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8A:A4:2E:DE:9B:B6:9F:88:2B:FF:D6:FE:42:29:4F:26:68:40:2A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145978.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad00::/32 Signature Algorithm: sha256WithRSAEncryption 58:18:9d:4e:b1:9b:fc:32:0c:6a:cf:48:65:94:e5:41:1f:47: 38:c8:cb:f5:1e:18:b9:e3:54:72:31:46:49:e0:c7:58:12:9c: 51:46:6b:33:dc:3a:7f:e0:17:20:cc:2d:da:1a:36:1e:dc:ee: 42:f6:10:f7:ce:cc:63:26:17:c7:83:36:66:10:f5:0f:c6:2b: d0:4b:85:49:19:ba:34:83:96:3a:77:49:f5:f1:c5:b7:03:4f: bc:62:cd:12:62:e9:c3:3e:7d:1c:5b:10:24:af:9f:63:d3:b3: 85:8d:b6:ff:ff:04:de:83:4f:21:fa:70:2f:7f:81:46:d8:c4: ed:82:76:09:65:91:e2:6b:df:48:33:b2:c6:56:12:a7:00:c1: 49:7a:5b:21:83:79:5d:69:6f:10:d9:03:58:5e:6a:7d:57:48: 74:e3:69:8f:2a:f2:fb:75:eb:1c:f9:61:3f:72:e5:b7:c0:c5: af:7a:8d:4c:0d:75:b8:a1:86:fa:80:85:f3:f3:1f:c8:09:e8: b0:81:6f:1a:b5:83:09:f2:40:0a:48:19:8a:64:f4:61:4b:a2: ae:ed:f6:e8:de:cf:7b:ba:5a:e2:73:70:d6:26:4a:24:8f:30: a0:e6:f8:91:d6:ad:02:0a:04:59:36:e7:ed:b0:41:1d:b7:55: 56:17:ce:ad -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUav+F0UaexibIzujuRo64dpV+OpowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUzMloX DTI3MDMwMzA2MzAzMlowMzExMC8GA1UEAxMoNzI4QUE0MkVERTlCQjY5Rjg4MkJG RkQ2RkU0MjI5NEYyNjY4NDAyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALCrVZIL+gxb3hM19mhgXpA1zpsdgeNxptu5qWLSQq577lPqKodkeEb4dHxW oI2xMvKNVsXw4Kvw4g8xIMkNYHBhTWX6Ya20FEE3Nr7Lpi7kuABylrbe/0qBWzsc NICeDsAeBAF86wuMabv+oXqZr8rTNNcjNub/EkCxO91JaJ/yUp+jk/Outuvo3q0X lRLmPaFpJlkqsvBgAidtvDk5mRVPkPQd6vFo4z93bjMs3V32Y8fuIsB88Yun9qJ4 3Te2g5MUZIvfNHLcyAerFfg6GA2ZUOs6H4B0+sYjm7fOcSAyzEYqfSAW6YCeknH2 dW2Wk+YnTbIc+OBF/T0DjtxD4UsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRyiqQu 3pu2n4gr/9b+QilPJmhAKjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTk3OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rQAwDQYJKoZIhvcNAQELBQADggEBAFgYnU6xm/wyDGrPSGWU5UEfRzjIy/UeGLnj VHIxRkngx1gSnFFGazPcOn/gFyDMLdoaNh7c7kL2EPfOzGMmF8eDNmYQ9Q/GK9BL hUkZujSDljp3SfXxxbcDT7xizRJi6cM+fRxbECSvn2PTs4WNtv//BN6DTyH6cC9/ gUbYxO2CdgllkeJr30gzssZWEqcAwUl6WyGDeV1pbxDZA1hean1XSHTjaY8q8vt1 6xz5YT9y5bfAxa96jUwNdbihhvqAhfPzH8gJ6LCBbxq1gwnyQApIGYpk9GFLoq7t 9ujez3u6WuJzcNYmSiSPMKDm+JHWrQIKBFk25+2wQR23VVYXzq0= -----END CERTIFICATE-----Generated at Sat Mar 28 13:06:17 2026 by rpki-client